How to secure a gateway to your enterprise? How to secure webservices? See yourself:

http://www.microsoft.com/technet/community/columns/sectip/st1007.mspx

Urs